CVE-2026-107038

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

Affected packages

Ecosystem	Package	Introduced	Fixed